[mythtv-users] Access new web app outside home network

[David Watkins]

On Thu, 6 Jun 2024 at 09:35, TimP <mythtv at corky.co> wrote:

> On 2024-06-06 03:08, Kevin Johnson wrote:
>
> A lot of this discussion is over my pay grade.
> But if all you have on the exposed server is the myth backend, are all the
> extra steps/security necessary?
>
> Apart from annoying things like deleting all your recordings or scheduling
> to record every movie with the word Christmas in the title, there is also
> the possibility of using the settings interface to define a user job that
> downloads a script and executes it.
>
> Cheers,
>
> Tim.
>
>
>
I believe that 'deleting all your recordings' can be triggered [relatively]
innocently by search bots cataloguing the mythweb pages.

If your mythtv box is compromised then everything else on your home becomes
much more at risk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mythtv.org/pipermail/mythtv-users/attachments/20240606/0dad51eb/attachment.htm>